auth.xml.ko

Apache HTTP Server 是一个功能强大的灵活的与HTTP/1.1相兼容的web服务器.这里给出的是Apache HTTP服务器的源码。

<?xml version='1.0' encoding='EUC-KR' ?>
<!DOCTYPE manualpage SYSTEM "../style/manualpage.dtd">
<?xml-stylesheet type="text/xsl" href="../style/manual.ko.xsl"?>
<!-- English Revision: 106090:151405 (outdated) -->

<!--
 Copyright 2004 The Apache Software Foundation

 Licensed under the Apache License, Version 2.0 (the "License");
 you may not use this file except in compliance with the License.
 You may obtain a copy of the License at

     http://www.apache.org/licenses/LICENSE-2.0

 Unless required by applicable law or agreed to in writing, software
 distributed under the License is distributed on an "AS IS" BASIS,
 WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 See the License for the specific language governing permissions and
 limitations under the License.
-->

<manualpage metafile="auth.xml.meta">
<parentdocument href="./">How-To / Tutorials</parentdocument>

<title>牢刘(Authentication), 鼻茄何咯(Authorization),
立辟力绢(Access Control)</title>

<summary>
    <p>牢刘(authentication)篮 磊脚捞 穿备扼绊 林厘窍绰 荤恩阑
    犬牢窍绰 例瞒捞促. 鼻茄何咯(authorization)绰 啊绊 酵篮 镑栏肺
    啊档废 趣篮 盔窍绰 沥焊甫 掘档废 倾侩窍绰 苞沥捞促.</p>
</summary>
  
<section id="related"><title>包访 葛碘苞 瘤矫绢</title>
    <related>
      <modulelist>
        <module>mod_auth</module>
        <module>mod_access</module>
      </modulelist>

      <directivelist>
        <directive module="mod_access">Allow</directive>
        <directive module="mod_auth">AuthGroupFile</directive>
        <directive module="core">AuthName</directive>
        <directive module="core">AuthType</directive>
        <directive module="mod_auth">AuthUserFile</directive>
        <directive module="mod_access">Deny</directive>
        <directive module="core">Options</directive>
        <directive module="core">Require</directive>
      </directivelist>
    </related>
</section>

<section id="introduction"><title>家俺</title>
    <p>寸脚狼 昆荤捞飘俊 乐绰 沥焊啊 家荐狼 荤恩甸父狼 厚剐捞芭唱
    捞甸父阑 困茄 沥焊扼搁, 捞 臂俊辑 汲疙窍绰 扁过阑 荤侩窍咯
    寸脚捞 焊辨 盔窍绰 荤恩父 其捞瘤甫 焊档废 且 荐 乐促.</p>

    <p>捞 臂篮 昆荤捞飘狼 老何甫 焊龋窍扁困秦 腹篮 荤恩甸捞
    荤侩窍绰 "钎霖利牢" 规过阑 促烽促.</p>
</section>

<section id="theprerequisites"><title>扁夯 瘤侥</title>
    <p>捞 臂俊辑 促风绰 瘤矫绢绰 辑滚狼 林汲沥颇老(老馆利栏肺
    <directive module="core" type="section">Directory</directive>
    冀记)捞唱 叼泛配府喊 汲沥颇老(<code>.htaccess</code> 颇老)俊辑
    荤侩茄促.</p>

    <p><code>.htaccess</code> 颇老阑 荤侩窍妨搁 捞 颇老俊 乐绰
    牢刘 瘤矫绢甫 倾侩窍档废 辑滚甫 汲沥秦具 茄促. 捞甫 困秦
    叼泛配府喊 汲沥颇老俊 绢恫 瘤矫绢甫 荤侩且 荐 乐绰瘤甫 搬沥窍绰
    <directive module="core">AllowOverride</directive> 瘤矫绢甫
    荤侩茄促.</p>

    <p>咯扁辑绰 牢刘阑 促风扁 锭巩俊, 促澜苞 鞍篮
    <code>AllowOverride</code> 瘤矫绢啊 鞘夸窍促.</p>

    <example>
      AllowOverride AuthConfig
    </example>

    <p>趣篮 瘤矫绢甫 流立 辑滚 林汲沥颇老俊 利绰促搁, 弊 颇老俊
    静扁 鼻茄捞 拱沸 乐绢具 茄促.</p>

    <p>弊府绊 焊龋且 颇老捞 绢叼乐绰瘤 舅扁困秦 辑滚狼 叼泛配府
    备炼俊 措秦 炼陛 舅酒具茄促. 捞 老篮 绢菲瘤臼绊, 利寸茄
    锭俊 磊技洒 汲疙且 巴捞促.</p>
</section>

<section id="gettingitworking"><title>扁夯利牢 汲沥窍扁</title>
    <p>捞力 辑滚狼 叼泛配府甫 鞠龋肺 焊龋窍绰 扁夯利牢 规过阑
    汲疙茄促.</p>

    <p>刚历 鞠龋颇老阑 父甸绢具 茄促. 捞 颇老篮 昆俊辑 立辟且
    荐 绝绰 镑俊 乐绢具 茄促. 促弗荤恩捞 鞠龋颇老阑 促款肺靛窍瘤
    给窍霸窍扁 困秦辑促. 抗甫 甸绢, 巩辑甸捞
    <code>/usr/local/apache/htdocs</code>俊 乐促搁 鞠龋颇老(甸)篮
    <code>/usr/local/apache/passwd</code>俊 敌促.</p>

    <p>酒颇摹俊 器窃等 <a
    href="../programs/htpasswd.html">htpasswd</a> 档备甫 荤侩窍咯
    鞠龋颇老阑 父电促. 捞 橇肺弊伐篮 酒颇摹甫 汲摹茄 镑狼
    <code>bin</code> 叼泛配府俊 乐促. 颇老阑 父甸妨搁 促澜苞
    鞍捞 涝仿茄促.</p>

    <example>
      htpasswd -c /usr/local/apache/passwd/passwords rbowen
    </example>

    <p><code>htpasswd</code>绰 鞠龋甫 拱绢焊绊, 犬牢阑 困秦
    鞠龋甫 促矫 涝仿窍扼绊 夸没茄促.</p>

    <example>
      # htpasswd -c /usr/local/apache/passwd/passwords rbowen<br />
      New password: mypassword<br />
      Re-type new password: mypassword<br />
      Adding password for user rbowen
    </example>

    <p>拱沸 <code>htpasswd</code>捞 角青颇老 版肺俊 绝促搁
    角青颇老狼 傈眉 版肺甫 涝仿秦具 茄促. 郴啊 荤侩窍绰 辑滚俊辑绰
    <code>/usr/local/apache/bin/htpasswd</code>俊 角青颇老捞
    乐促.</p>

    <p>促澜栏肺 辑滚啊 鞠龋甫 夸没窍档废 汲沥窍绊, 辑滚俊霸
    绢恫 荤侩磊狼 立辟阑 倾侩且瘤 舅妨拎具 茄促.
    <code>httpd.conf</code>甫 祈笼窍芭唱 <code>.htaccess</code>
    颇老阑 荤侩窍咯 汲沥茄促. 抗甫 甸绢,
    <code>/usr/local/apache/htdocs/secret</code> 叼泛配府甫
    焊龋窍妨搁, 酒贰 瘤矫绢甫
    <code>/usr/local/apache/htdocs/secret/.htaccess</code> 颇老捞唱
    <code>httpd.conf</code>狼 &lt;Directory
    /usr/local/apache/apache/htdocs/secret&gt; 冀记俊 利绢具
    茄促.</p>

    <example>
      AuthType Basic<br />
      AuthName "Restricted Files"<br />
      AuthUserFile /usr/local/apache/passwd/passwords<br />
      Require user rbowen
    </example>

    <p>瘤矫绢甫 窍唱究 混旗焊磊. <directive
    module="core">AuthType</directive> 瘤矫绢绰 荤侩磊甫 牢刘且
    规过阑 急琶茄促. 啊厘 老馆利牢 规过篮 <code>Basic</code>栏肺,
    <module>mod_auth</module>啊 备泅茄促. 弊矾唱 Basic
    牢刘篮 宏扼快历啊 辑滚肺 鞠龋甫 鞠龋拳窍瘤 臼绊 焊辰促.
    弊矾骨肺 扁剐 磊丰甫 焊龋窍扁困秦 捞 规过阑 荤侩窍搁 救等促.
    酒颇摹绰 <code>AuthType Digest</code>扼绰 牢刘 规过档 瘤盔茄促.
    捞 规过篮 <module>mod_auth_digest</module>啊 备泅窍哥, 概快
    救傈窍促. 啊厘 弥辟 努扼捞攫飘甸父捞 Digest 牢刘阑 瘤盔茄促绊
    茄促.</p>

    <p><directive module="core">AuthName</directive> 瘤矫绢绰
    牢刘俊 荤侩且 <dfn>康开(realm)</dfn>阑 瘤沥茄促. 康开篮
    滴啊瘤 开且阑 茄促. 霉锅掳绰 努扼捞攫飘啊 焊烹 捞 沥焊甫
    鞠龋 措拳芒俊 焊咯霖促. 滴锅掳绰 康开 沥焊甫 荤侩窍咯
    努扼捞攫飘啊 漂沥 牢刘备开俊 绢恫 鞠龋甫 焊尘瘤 搬沥茄促.</p>

    <p>抗甫 甸绢, 老窜 努扼捞攫飘啊 <code>"Restricted Files"</code>
    康开俊 牢刘捞 己傍窍看促搁, 努扼捞攫飘绰 磊悼栏肺 鞍篮 辑滚俊辑
    <code>"Restricted Files"</code> 康开栏肺 钎矫等 备开俊 措秦
    悼老茄 鞠龋甫 矫档茄促. 弊贰辑 咯矾 力茄 备开捞 鞍篮 康开阑
    傍蜡窍搁 荤侩磊啊 咯矾锅 鞠龋甫 涝仿窍瘤 臼酒档 等促. 拱沸
    焊救惑 捞蜡肺 努扼捞攫飘绰 辑滚狼 龋胶飘疙捞 促福搁 亲惑
    货肺 鞠龋甫 拱绢夯促.</p>

    <p><directive module="mod_auth">AuthUserFile</directive>
    瘤矫绢绰 快府啊 规陛 <code>htpasswd</code>肺 父电 鞠龋颇老狼
    版肺甫 汲沥茄促. 荤侩磊啊 腹促搁 夸没付促 概锅 荤侩磊甫
    牢刘窍扁困秦 老馆 巩辑颇老阑 八祸窍绰单 矫埃捞 惑寸洒 腹捞
    吧副 荐 乐促. 酒颇摹绰 狐弗 单捞鸥海捞胶 颇老俊 荤侩磊 沥焊甫
    历厘且 荐 乐促. <module>mod_auth_dbm</module> 葛碘篮 <directive
    module="mod_auth_dbm">AuthDBMUserFile</directive> 瘤矫绢甫
    力傍茄促. <a href="../programs/dbmmanage.html">dbmmanage</a>
    橇肺弊伐阑 荤侩窍咯 鞠龋颇老阑 父甸绊 促烽促. <a
    href="http://modules.apache.org/">酒颇摹 葛碘
    单捞鸥海捞胶</a>俊绰 咯矾 促弗 牢刘 规侥阑 力傍窍绰 力伙磊啊
    父电 葛碘甸捞 乐促.</p>

    <p>付瘤阜栏肺 <directive module="core">Require</directive>
    瘤矫绢绰 辑滚狼 漂沥 康开俊 立辟且 荐 乐绰 荤侩磊甫 瘤沥窍咯
    鼻茄何咯甫 茄促. 促澜 例篮 <code>require</code> 瘤矫绢甫
    荤侩窍绰 促剧茄 规过阑 汲疙茄促.</p>
</section>

<section id="lettingmorethanonepersonin"><title>咯矾疙阑 甸咯焊郴扁</title>
    <p>困狼 瘤矫绢绰 叼泛配府肺 (荤侩磊疙捞 <code>rbowen</code>牢)
    茄 荤恩父阑 甸咯焊辰促. 措何盒狼 版快 咯矾 荤恩阑 甸咯焊郴绊
    酵阑 巴捞促. 捞力 <directive
    module="mod_auth">AuthGroupFile</directive>阑
    荤侩且 锭促.</p>

    <p>咯矾 荤恩阑 甸咯焊郴绊 酵促搁 弊缝疙苞 弊 弊缝俊 绢恫
    荤侩磊甸捞 乐绰瘤 舅妨林绰 弊缝颇老捞 鞘夸窍促. 捞 颇老狼
    屈侥篮 概快 埃窜窍咯, 酒公 祈笼扁肺唱 父甸 荐 乐促. 颇老郴侩篮
    促澜苞 鞍促.</p>

   <example>
     GroupName: rbowen dpitts sungo rshersey
   </example>

    <p>弊成 傍归栏肺 备盒茄 变 弊缝 备己盔 格废老 挥捞促.</p>

    <p>扁粮狼 鞠龋颇老俊 荤侩磊甫 眠啊窍妨搁 促澜苞 鞍捞 涝仿茄促</p>

    <example>
      htpasswd /usr/local/apache/passwd/passwords dpitts
    </example>

    <p>傈苞 鞍瘤父, 货肺 颇老阑 父甸瘤 臼绊 扁粮 颇老俊 荤侩磊甫
    眠啊茄促. (<code>-c</code> 可记篮 货肺 鞠龋颇老阑 父电促).</p>

    <p>捞力 <code>.htaccess</code> 颇老阑 促澜苞 鞍捞 荐沥茄促.</p>

    <example>
      AuthType Basic<br />
      AuthName "By Invitation Only"<br />
      AuthUserFile /usr/local/apache/passwd/passwords<br />
      AuthGroupFile /usr/local/apache/passwd/groups<br />
      Require group GroupName
    </example>

    <p>弊矾搁 <code>GroupName</code> 弊缝俊 加窍哥
    <code>password</code> 颇老俊 亲格捞 乐绰 荤侩磊啊 棵官弗
    鞠龋甫 涝仿窍搁 立辟阑 倾侩茄促.</p>

    <p>咯矾 老馆 荤侩磊甫 甸咯焊郴绰 促弗 规过捞 乐促. 弊缝颇老阑
    父甸 鞘夸绝捞 促澜 瘤矫绢甫 荤侩窍扁父 窍搁 等促.</p>

    <example>
      Require valid-user
    </example>

    <p><code>Require user rbowen</code> 措脚 捞 瘤矫绢甫 荤侩窍搁
    鞠龋颇老俊 乐绰 穿备扼档 棵官弗 鞠龋甫 涝仿窍扁父 窍搁 立辟阑
    倾侩茄促. 弊缝喊肺 促弗 鞠龋颇老阑 荤侩窍咯 弊缝苞 厚搅茄
    瓤苞甫 掘阑 荐档 乐促. 捞 版快 酒颇摹啊 颇老 滴俺(鞠龋颇老苞
    弊缝颇老)啊 酒囱 颇老 茄俺(鞠龋颇老)父 八荤窍搁 等促绰 巴捞
    厘痢捞促. 弊矾唱 咯矾 鞠龋颇老阑 包府秦具 窍绊, <directive
    module="mod_auth">AuthUserFile</directive> 瘤矫绢俊
    沥犬茄 鞠龋颇老阑 瘤沥秦具 窍绰 巴篮 窜痢捞促.</p>
</section>

<section id="possibleproblems"><title>惯积且 荐 乐绰 巩力痢</title>
    <p>Basic 牢刘 规侥篮 辑滚俊辑 巩辑甫 夸没且 锭付促 荤侩磊疙苞
    鞠龋甫 犬牢茄促. 缴瘤绢 鞍篮 其捞瘤甫 货肺 绊魔且 锭档 其捞瘤客
    (弊覆捞 鞠龋肺 焊龋窍绰 叼泛配府俊 乐绰 版快) 其捞瘤俊 乐绰
    葛电 弊覆俊 措秦 促矫 犬牢茄促. 咙累窍淀捞 加档啊 炼陛 蠢妨柳促.
    鞠龋颇老阑 凯绢辑 荤侩磊疙阑 茫阑 锭鳖瘤 荤侩磊 格废阑 混旗毫具
    窍扁锭巩俊 鞠龋颇老 农扁啊 目龙 荐废 歹 蠢妨柳促. 弊府绊
    捞 累诀阑 其捞瘤甫 夸没且 锭付促 柳青茄促.</p>

    <p>弊贰辑 泅角利栏肺 茄 鞠龋颇老俊 历厘且 荐 乐绰 荤侩磊荐俊绰
    茄拌啊 乐促. 捞 茄拌绰 荤侩窍绰 辑滚狼 己瓷俊 蝶扼 促福瘤父,
    亲格捞 荐归俺啊 逞绰促搁 蠢妨柳促绊 积阿窍绊 促弗 牢刘 规过阑
    绊妨秦具 茄促.</p>
</section>

<section id="whatotherneatstuffcanido"><title>促弗 规过档 啊瓷茄啊?</title>
    <p>荤侩磊疙苞 鞠龋甫 荤侩茄 牢刘捞 促啊 酒聪促. 辆辆 立加茄
    厘家客 鞍篮 促弗 沥焊甫 啊瘤绊 荤侩磊甫 甸咯焊郴绊 酵阑
    锭啊 乐促.</p>

    <p><directive module="mod_access">Allow</directive>客
    <directive module="mod_access">Deny</directive> 瘤矫绢绰
    巩辑甫 夸没茄 哪腔磐狼 龋胶飘疙 趣篮 龋胶飘 林家甫 啊瘤绊
    立辟阑 倾侩窍芭唱 芭何茄促. <directive
    module="mod_access">Order</directive> 瘤矫绢绰 捞 滴
    瘤矫绢客 鞍捞 荤侩窍咯, 酒颇摹俊霸 绢恫 鉴辑肺 痹蘑阑 利侩且瘤
    舅赴促.</p>

    <p>捞甸 瘤矫绢 荤侩过篮 促澜苞 鞍促.</p>

    <example>
      Allow from <var>address</var>
    </example>

    <p>咯扁辑 <var>address</var>绰 IP 林家(趣篮 IP 林家 老何)唱
    肯傈茄 档皋牢疙(趣篮 档皋牢疙 老何)捞促. 盔茄促搁 咯矾 林家唱
    档皋牢疙阑 荤侩且 荐 乐促.</p>

    <p>抗甫 甸绢, 穿焙啊啊 霸矫魄俊 堡绊甫 棵府绊 乐促搁 促澜苞
    鞍捞 立辟阑 阜阑 荐 乐促.</p>

    <example>
      Deny from 205.252.46.165
    </example>

    <p>弊 林家俊辑 甸绢坷绰 规巩磊绰 捞 瘤矫绢啊 焊龋窍绰 其捞瘤甫
    杭 荐 绝促. IP 林家 措脚 促澜苞 鞍捞 哪腔磐疙阑 荤侩且 荐档
    乐促.</p>

    <example>
      Deny from <var>host.example.com</var>
    </example>

    <p>肚, 傈眉 档皋牢狼 立辟阑 阜栏妨搁 林家唱 档皋牢疙狼 老何甫
    荤侩茄促.</p>

    <example>
      Deny from <var>192.101.205</var><br />
      Deny from <var>cyberthugs.com</var> <var>moreidiots.com</var><br />
      Deny from ke
    </example>

    <p><directive module="mod_auth">Order</directive>甫
    <directive module="mod_auth">Deny</directive>客 <directive
    module="mod_auth">Allow</directive> 瘤矫绢客 鞍捞
    荤侩窍咯 角力肺 盔窍绰 措惑阑 阜阑 荐 乐促.</p>

    <example>
      Order deny,allow<br />
      Deny from all<br />
      Allow from <var>dev.example.com</var>
    </example>

    <p><directive module="mod_auth">Allow</directive>
    瘤矫绢父 荤侩窍搁, 秦寸 龋胶飘狼 荤侩磊甫 倾侩窍绊 芭扁俊
    眠啊肺 葛电 荤恩阑 倾侩窍骨肺 盔窍绰 搬苞甫 掘瘤 给茄促.
    寸脚篮 漂沥 荤恩<em>父</em> 倾侩窍辨 盔茄促.</p>
</section>

<section id="moreinformation"><title>歹 腹篮 沥焊</title>
    <p><module>mod_auth</module>客
    <module>mod_access</module> 巩辑俊 立辟力绢啊 悼累窍绰
    规过俊 措茄 歹 腹篮 沥焊啊 乐促.</p>
</section>
</manualpage>